TW202001582A - Method of device identification and server with function of device identification - Google Patents

Abstract

A method of device identification includes the following steps: enabling a server for executing an application program; determining whether a external device is plugged into a device port of the server by a event system of the server when the application program is executed; capturing information associated with the external device by a device file system when it is determined that the external device is plugged into the device port of the server; determining whether the external device is a legal device or not by comparing a content of a black-white list stored in the server to the information associated with the external device; executing a device application program associated with the external device by the server when it is determined that the external device is a legal device.

Description

Device identification method and server with device identification function

The invention relates to a device identification method and a server with a device identification function, in particular to a device identification method using a black and white list and a server with a device identification function.

Server devices on the market are usually used in combination with other peripheral devices. Common peripheral devices may be, for example, a USB interface keyboard, a mouse, or a flash drive. In order to be plugged into or removed from the server device according to the type of peripheral device, the corresponding operation often needs to be preset in the server device and cannot be dynamically changed. In addition, it cannot expand support for unknown peripheral devices.

In addition, for peripheral devices of the same type, the server device cannot identify the brand/model when it is connected, nor can it initialize or perform function tests. Because the server device cannot directly use the peripheral device without detection, if the inserted device is unknown or abnormal, it may cause harm to the security of the server device.

The invention provides a device identification method and a server with a device identification function, which has both a self-detection function for internal devices and an external detection function for peripheral devices. In this way, it can be confirmed whether the installed internal/external devices are legitimate devices, so as to improve the operational safety of the server.

According to an embodiment of the present invention, a device identification method is disclosed, which includes the following steps: starting a server to execute an application program in the server; when executing an application program, the event system in the server detects whether an external device is plugged in Device port to the server; when the event system detects that an external device is plugged into the device port of the server, the device file system in the server is used to retrieve the information of the external device; based on the black and white list of the server memory The information of the external device is compared to determine whether the external device is a legal device; when it is determined that the external device is a legal device, the server executes the device application program associated with the external device. In one embodiment, the method further includes performing a self-test procedure after executing the application program, for detecting multiple hardware devices on the motherboard in the server, just like the behavior after the external device is plugged in. Whether the information of the hardware devices meets the default content of the hardware list to selectively activate the hardware devices.

According to one embodiment of the present invention, a server with a device identification function is disclosed, including a motherboard, a device port, a first storage area, a second storage area, and a third storage area. The first storage area, the second storage area, and the third storage area are located on the motherboard, and the device connection port is electrically connected to the motherboard and is used for pluggable connection of an external device. The first storage area is used to store application programs and device application programs associated with internal/external devices. The second storage area is used to store black and white lists and hardware lists. The third storage area stores the event system and the device file system. The event system is used to detect whether an external device is plugged into the device port of the server when the application is executed. The device file system is used to retrieve the information of the external device when it detects that the external device is plugged into the device port of the server. The server compares the information of the external device based on the black and white list to determine whether the external device is a legal device, and when the external device is determined to be a legal device, the server executes the device application program associated with the external device. In one embodiment, after executing the application program, the server further executes a self-detection process for detecting multiple hardware devices on the motherboard, just like the behavior after the external device is plugged in. The server depends on the hardware The device information queries the contents of the hardware list in the second storage area to selectively activate the hardware devices.

In summary, in the device identification method and the server with the device identification function proposed by the present invention, the self-detection process is used to confirm whether the internal device is activated, and then the external device is detected and the brand of the external device is retrieved /Model and other related information are compared with the pre-stored black and white list to determine whether the plugged-in peripheral device is a legal device, and then decide whether to execute the corresponding device application program. The device identification method and the server with the device identification function proposed by the present invention also have the detection functions of the internal device and the external peripheral device. In this way, it can be confirmed whether the installed internal/external devices are legitimate devices, so as to improve the operational safety of the server.

The above description of the disclosure and the following description of the embodiments are used to demonstrate and explain the spirit and principle of the present invention, and provide a further explanation of the scope of the patent application of the present invention.

The following describes in detail the detailed features and advantages of the present invention in the embodiments. The content is sufficient for any person skilled in the relevant art to understand and implement the technical content of the present invention, and according to the contents disclosed in this specification, the scope of patent application and the drawings Anyone skilled in the relevant art can easily understand the purpose and advantages of the present invention. The following examples further illustrate the views of the present invention in detail, but do not limit the scope of the present invention in any way.

Please refer to FIG. 1. FIG. 1 is a functional block diagram of a server with a device identification function according to an embodiment of the present invention. As shown in FIG. 1, the server 1 includes a motherboard 10, a device connection port 11, a first storage area 12, a second storage area 13 and a third storage area 14. The first storage area 12, the second storage area 13 and the third storage area 14 are located on the motherboard 10. In an embodiment, in addition to the aforementioned storage area, the motherboard 10 is further provided with multiple hardware devices 101~103. The main board 10 is, for example, a main circuit board in a general server, and the hardware devices 101 to 103 are, for example, hardware components inside a server such as a graphics card, a sound card, and a network card, and the invention is not limited thereto.

The device port 11 is electrically connected to the motherboard 10 and is used for pluggable connection of the external device 2. In practice, the device port 11 can be a common USB interface port for plugging and unplugging to peripheral devices. The first storage area 12 is used to store the application program AP and the device application program DP (that is, "Device Process") associated with the internal/external device. The second storage area 13 is used to store the black and white list BL and/or the hardware list HL. The third storage area 14 is used to store the event system ES (that is, “Event System”) and the device file system DS (that is, “Device File System”). In an implementation example, the first storage area 12 and the second storage area 13 are divided by the storage space of a single storage memory (such as a hard disk), and the third storage area 14 is for device access The virtual memory space mapped out at the time acts on the interface with the device data transfer. In another implementation example, the first storage area 12 and the second storage area 13 are storage spaces respectively provided by different storage memories (such as cloud storage spaces). In one embodiment, the aforementioned black and white list BL and hardware list HL can be integrated into a single system black and white list for the server 1 to query.

In an embodiment, when the server 1 is initially started, the server 1 will first execute the application AP in the first storage area 12 to start a self-detection process for detecting the hardware device 101 on the motherboard 10~ 103. Specifically, the server 1 performs the self-test procedure to confirm whether the hardware devices 101 to 103 installed on the motherboard 10 are the devices to be installed. In actual operation, if the server 1 confirms that any of the hardware devices 101 to 103 is the device to be installed, it will be activated. On the contrary, if the server 1 confirms that any of the hardware devices 101 to 103 is not the device to be installed, it will disable the hardware device. By performing the self-test procedure, the server 1 can confirm which hardware devices on the motherboard 10 are to be enabled and which hardware devices are to be disabled. In a practical example, the self-detection process includes detecting whether the information of the hardware devices 101-103 meets the preset content of the hardware list HL, so as to selectively activate the hardware devices 101-103.

Specifically, in the self-test procedure, the processor of the server 1 first finds the hardware devices 101-103 installed on the motherboard 10 from the device file system DS in the third storage area 14, and compares the second The preset content of the hardware list HL in the storage area 13 may include the brand and/or model of the hardware device approved by the server. The server 1 checks each of the hardware devices 101 to 103 one by one. If the brand and/or model of any hardware device in the hardware devices 101 to 103 does not belong to the hardware device brand and the hardware device included in the hardware list HL /Or model, the server 1 will recognize the hardware device as an illegal hardware device and further disable the hardware device. Conversely, if the brand and/or model of any of the hardware devices 101 to 103 belongs to the brand and/or model of the hardware device included in the hardware list HL, the server 1 The hardware device is recognized as a legal hardware device and further executes a device application program on the hardware device to activate the hardware device.

In other words, this embodiment scans through the device file system DS to find each hardware device connected to the server, and creates and records some information related to the hardware devices to facilitate management of the hardware device. Usage. If necessary, its records can also be uploaded to the cloud for extended warranty-related use. The server 1 can ensure that only certain trusted hardware devices are enabled when it is turned on, and it is disabled for unknown hardware devices, thereby improving the security of the server operation.

Please refer to FIG. 1 again. In another embodiment, the event system ES is used to detect whether an external device 2 is plugged into the device port 11 of the server 1 when the application AP is executed. The device file system DS is used to retrieve the information of the external device 2 when detecting that the external device 2 is plugged into the device port 11 of the server 1. Specifically, after the aforementioned self-detection device is executed, the legal hardware device on the motherboard 10 inside the server 1 can start to operate to perform the basic operation functions of the server. Then, in the background where the application AP is resident, the processor in the server 1 reads the event system ES and the device file system DS of the third storage area 14 to perform the plug detection of the external device 2 and the external device 2 The task of data retrieval. In this embodiment, the external device 2 is a USB flash drive. In other embodiments, the external device 2 may be a computer peripheral device such as a keyboard or a mouse.

To illustrate the above with a practical application example, as shown in FIG. 1, in the case of executing the application AP, when an external device 2 (such as a USB flash drive) is plugged into the device port 11, the event system ES will first Detecting that the device port 11 is plugged by the external device 2, the application AP retrieves the relevant information of the external device 2 from the device file system DS according to the event detected by the event system ES, where the relevant information can be For example, the manufacturer/model of the external device 2. Then, the server 1 checks the information of the external device 2 according to the black-and-white list BL to determine whether the external device 2 is a legitimate device. In an embodiment, the server 1 is used to determine that the external device 2 is a legitimate device when one of the plurality of white list items in the black and white list BL matches the information of the external device 2.

In detail, the processor in the server 1 reads the black and white list BL from the second storage area 13, and the black and white list BL contains a plurality of white list items, such as the manufacturer/model number that can be determined as a legitimate device. When the captured manufacturer/model of the external device 2 meets one of the items in the white list, the server 1 determines that the external device 2 is a legal device. When the server 1 determines that the external device 2 is a legitimate device, the server 1 executes the device application DP associated with the external device 2. In practice, the device application DP may include initialization, functional testing, troubleshooting, logs, etc. of the external device 2. In other words, through the application AP resident, when the peripheral external device is combined with the server 1, the server 1 can obtain information about the plugged external device, and further confirm the plugged external device through the black and white list BL Whether it is legal, as a basis for whether to execute the application program of the external device. In this way, it is possible to solve the risk that the conventional server directly uses peripheral devices without detection, and improve the security of the overall server.

Please refer to FIG. 2, which is a flowchart of a method for identifying a device according to an embodiment of the invention. The device identification method described above can be applied to the server 1 of the aforementioned embodiment of FIG. 1. As shown in FIG. 2, in step S201, the server 1 is started, and in step S202, the processor of the server 1 executes the application program AP in the server 1. In step S203, when the application program AP is executed, an event system ES (ie, "Event System") in the server 1 is used to detect whether an external device 2 is plugged into the device port 11 of the server 1. When the event system ES detects that an external device 2 is plugged into the device port 11 of the server 1, in step S204, the device file system DS (ie, "Device File System") in the server 1 is used to retrieve Get information from external device 2. In step S205, the information of the external device is compared with the black and white list BL in the server 1 to determine whether the external device 2 is a legitimate device. When it is determined that the external device 2 is a legitimate device, in step S206, the server 1 is used to execute the device application associated with the external device 2.

In an embodiment, as shown in FIG. 2, after the server 1 is started and the application AP in the server 1 is executed, in step S202a, a self-detection process is further performed to detect the Multiple hardware devices 101-103 on the motherboard 10. In this embodiment, the self-detection process includes detecting whether the information of the hardware devices 101-103 meets the default content of the hardware list HL, so as to selectively activate the hardware devices 101-103. The default content of the hardware list HL includes the brand and/or model of the hardware device approved by the server 1. In other words, only the brand and/or model of the hardware device included in the hardware list HL will be activated by the server 1. In a practical example, assume that the hardware device 101 is a hardware device produced by A manufacturer, and the hardware list HL does not include the manufacturer's brand. At this time, the server 1 determines that the hardware device 101 (ie, A brand) is not suitable and disables the hardware device 101. In practice, the server design manufacturer can set the server to be suitable for a certain number of brands or models of hardware devices, thereby avoiding the combination of its own servers and unknown brands/models of hardware devices , Causing the server to operate abnormally.

In one embodiment, the step of comparing the information of the external device 2 according to the black and white list BL in the server 1 to determine whether the external device 2 is a legitimate device includes the following sub-steps I to III. In sub-step I, the white list items included in the black and white list BL are compared with the information of the external device 2. In sub-step II, when the information of the external device 2 matches one of the white list items, it is determined that the external device 2 is a legitimate device. In sub-step III, when the information of the external device 2 does not match any of the white list items, it is determined that the external device 2 is an illegal device. The detection of the internal hardware devices 101 to 103 and the external device 2 by the server 1 has been described in detail in the foregoing paragraphs, and will not be repeated here.

In summary, in the device identification method and the server with device identification function proposed by the present invention, in the context of the permanent application, the self-detection process can be used to confirm which internal devices are to be activated and can also detect the surrounding Plug in the external device and further retrieve the relevant information such as the make/model of the external device, and compare it with the pre-stored black and white list to determine whether the connected peripheral device is a legal device, so as to decide whether to execute the corresponding Device application. In summary, the device identification method and the server with the device identification function proposed by the present invention have both the self-detection function of the internal device and the detection function of the external peripheral device. In this way, it can be confirmed whether the installed internal/external devices are legitimate devices, so as to improve the operational safety of the server.

Although the present invention is disclosed as the foregoing embodiments, it is not intended to limit the present invention. Without departing from the spirit and scope of the present invention, all modifications and retouching are within the scope of patent protection of the present invention. For the protection scope defined by the present invention, please refer to the attached patent application scope.

1‧‧‧Server 10‧‧‧ Motherboard 101~103‧‧‧Hardware device 11‧‧‧Device port 12‧‧‧ First storage area 13‧‧‧Second storage area 14‧‧‧ Third storage Zone 2‧‧‧External device AP‧‧‧Application DP‧‧‧Device application BL‧‧‧Black and white list HL‧‧‧Hardware list ES‧‧‧Event system DS‧‧‧Device file system

FIG. 1 is a functional block diagram of a server with device identification function according to an embodiment of the invention. FIG. 2 is a method flowchart of a device identification method according to an embodiment of the invention.

Claims (8)

A device identification method includes: starting a server and executing an application in the server; when executing the application, an event system in the server detects whether an external device is plugged into the server A device port of the device; when the event system detects that the external device is plugged into the device port of the server, a device file system in the server is used to retrieve the information of the external device; according to the server A black and white list in the memory of the device compares the information of the external device to determine whether the external device is a legal device; and when the external device is determined to be a legal device, the server executes the device application associated with the external device . The device identification method as described in claim 1, further includes executing a self-detection process for detecting multiple hardware devices on a motherboard in the server after executing the application program, wherein the self-detection process includes Detecting whether the information of the hardware devices matches the default content of a hardware list to selectively activate the hardware devices. The device identification method according to claim 1, wherein the black and white list of the server memory is compared with the information of the external device to determine whether the external device is a legal device. List items and information of the external device; when the information of the external device matches one of the white list items, the external device is judged to be a legal device; and when the information of the external device does not match any of the white list items , The external device is judged to be illegal. The device identification method according to claim 1, wherein the information of the external device is the manufacturer's brand or model. A server with device identification function includes: a main board; a device connection port electrically connected to the main board; the device connection port is used for pluggable connection of an external device; and a first storage area is provided in the On the motherboard and used to store an application program and a device application program; a second storage area on the motherboard and used to store a black and white list; and a third storage area on the motherboard and used to store An event system and a device file system; wherein, the event system is used to detect whether an external device is plugged into the device port of the server when the application is executed, and the device file system is used to detect When the external device is plugged into the device port of the server, the information of the external device is retrieved; wherein, the server compares the information of the external device with the black and white list to determine whether the external device is a legal device , And when it is determined that the external device is a legitimate device, the server executes the device application program associated with the external device. The server with device identification function as described in claim 5, wherein a plurality of hardware devices are provided on the motherboard, and after executing the application program, the server further executes a self-testing process for detecting the motherboard The hardware devices, wherein during the self-test process, the server queries the contents of a hardware list in the second storage area according to the information of the hardware devices to selectively activate the hardware devices . The server with a device identification function according to claim 5, wherein the server is used to determine that the external device is a legitimate device when one of the white list items in the black and white list matches the information of the external device . The server with a device identification function according to claim 5, wherein the information of the external device is the manufacturer's brand or model.

Images